Xram Virus


 Virus Name:  Xram 
 Aliases:     Xram.1000 
 V Status:    New 
 Discovery:   January, 1996 
 Symptoms:    .COM file growth; message displayed 
 Origin:      Unknown 
 Eff Length:  1,000  Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method: ChAV, F-Prot, AVTK, IBMAV, NAV, NAVDX, ViruScan 2.54+, 
                   Innoc, AVTK/N, IBMAV/N, NAV/N, NShld 2.33+ 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Xram or Xram.1000 virus was received in January, 1996.  Its 
       origin or point of isolation is unknown.  Xram is a non-resident, 
       direct action infector of .COM files, including COMMAND.COM. 
 
       When a program infected with the Xram virus is executed, this 
       virus will infect one .COM file located in the current directory. 
       The following message will then be displayed until the system 
       user presses a key on the system keyboard, then normal program 
       output will resume: 
 
           "** El COBOL no sirve, es una Mierda **" 
 
       Programs infected with the Xram virus will have a file length 
       increase of 1,000 bytes with the virus being located at the end 
       of the file.  The program's date and time in the DOS disk directory 
       listing will not be altered.  The following text strings are 
       visible within the viral code: 
 
           "*.com" 
           "** El COBOL no sirve, es una Mierda **" 
           "(C) Karl Xram" 

Show viruses from discovered during that infect .

Main Page